5683 matches found
CVE-2018-21017
GPAC 0.7.1 has a memory leak in dinfRead in isomedia/boxcodebase.c...
CVE-2018-21016
audiosampleentryAddBox at isomedia/boxcodebase.c in GPAC 0.7.1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...
CVE-2018-21017
GPAC 0.7.1 has a memory leak in dinfRead in isomedia/boxcodebase.c...
CVE-2018-21015
AVCDuplicateConfig at isomedia/avcext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file. There is "cfgnew-AVCLevelIndication = cfg-AVCLevelIndication;" but cfg could be NULL...
CVE-2018-21016
audiosampleentryAddBox at isomedia/boxcodebase.c in GPAC 0.7.1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...
CVE-2018-21017
GPAC 0.7.1 has a memory leak in dinfRead in isomedia/boxcodebase.c...
Heap overflow
audiosampleentryAddBox at isomedia/boxcodebase.c in GPAC 0.7.1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...
Null pointer dereference
AVCDuplicateConfig at isomedia/avcext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file. There is "cfgnew-AVCLevelIndication = cfg-AVCLevelIndication;" but cfg could be NULL...
UBUNTU-CVE-2018-21015
AVCDuplicateConfig at isomedia/avcext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file. There is "cfgnew-AVCLevelIndication = cfg-AVCLevelIndication;" but cfg could be NULL...
Memory corruption
GPAC 0.7.1 has a memory leak in dinfRead in isomedia/boxcodebase.c...
CVE-2018-21015
AVCDuplicateConfig at isomedia/avcext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file. There is "cfgnew-AVCLevelIndication = cfg-AVCLevelIndication;" but cfg could be NULL...
CVE-2018-21016
audiosampleentryAddBox at isomedia/boxcodebase.c in GPAC 0.7.1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...
CVE-2018-21015
CVE-2018-21015 affects GPAC 0.7.1: AVC_DuplicateConfig() in isomedia/avc_ext.c may dereference a NULL cfg pointer when processing crafted files, causing a denial of service. Documents indicate this vulnerability is fixed in GPAC updates (e.g., GPAC 0.8.0 and later) via vendor advisories (Debian/M...
CVE-2018-21015
AVCDuplicateConfig at isomedia/avcext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file. There is "cfgnew-AVCLevelIndication = cfg-AVCLevelIndication;" but cfg could be NULL...
CVE-2018-21015
AVCDuplicateConfig at isomedia/avcext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file. There is "cfgnew-AVCLevelIndication = cfg-AVCLevelIndication;" but cfg could be NULL...
CVE-2018-21016
audiosampleentryAddBox at isomedia/boxcodebase.c in GPAC 0.7.1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...
CVE-2018-21016
CVE-2018-21016 affects GPAC 0.7.1; audio_sample_entry_AddBox() in isomedia/box_code_base.c allows a crafted file to trigger a heap-based buffer over-read, causing denial of service (application crash). Public docs confirm GPAC vulnerability details and downstream advisories (Debian DLA-2072-1 / M...
CVE-2018-21016
audiosampleentryAddBox at isomedia/boxcodebase.c in GPAC 0.7.1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...
CVE-2018-21017
GPAC 0.7.1 is affected by a memory leak in dinf_Read (isomedia/box_code_base.c) related to CVE-2018-21017. The CVE is documented across multiple sources (NVD/NASL/Red Hat/Ubuntu mentions) and has CVSS v3.1 base score 6.5 (network, low complexity, user interaction required) with a high impact on a...